Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
File: azT6U9HYTbq-aY1bvMrt8QnRV64.mft (raw, json)
Hash identifier: WqxJblrET/LzSMDipth+a6A4mjMX6pdnI4wMgtqspZ0=
Subject key identifier: 47:C4:4F:EE:D8:DC:03:E7:C2:98:F0:6E:5E:24:67:BA:76:52:F3:31
Authority key identifier: 6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE
Certificate issuer: /CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
Certificate serial: 0194BC3C9A6277239AC888D8A12FCDC07154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: azT6U9HYTbq-aY1bvMrt8QnRV64.crl (hash: 4EMKaYdFkebnZETNblyW4nY3sfNlePlq3l0bsIarUjY=)
2: yFAScqy1SZnNR2xfePl0FenNN0g.roa (hash: vURxboeBcUQDk9P166WC/cJAnLRENen5C6McIffi+y4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9a:62:77:23:9a:c8:88:d8:a1:2f:cd:c0:71:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=47c44feed8dc03e7c298f06e5e2467ba7652f331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:dd:60:3c:ba:eb:36:23:58:a7:87:fc:92:
8f:b4:f1:03:ff:cc:88:40:de:57:fd:0d:b4:97:2a:
bc:79:06:d6:9a:fc:a4:b0:5a:b9:67:4a:7a:a6:13:
3e:72:7f:6c:79:57:67:b5:15:89:81:f7:59:11:ed:
7c:fb:e7:e3:1d:94:74:2a:bb:e7:89:22:e0:6c:cb:
52:ff:01:20:cc:3e:2e:95:0f:8b:47:1a:1f:2c:fd:
ee:8a:9c:5b:e4:92:d4:2d:d1:92:9d:69:ff:04:39:
ac:5d:1e:e8:70:95:69:8a:a0:84:e8:04:99:8d:2a:
31:1a:45:ad:b6:5b:2b:ef:e1:c1:8c:7c:c5:d1:08:
9c:1c:ab:2c:4d:ff:8e:35:29:8a:05:b5:83:3c:a0:
c8:9f:c6:22:23:fa:d4:92:15:36:4b:61:66:dc:9a:
ae:ba:e0:5a:fe:7b:40:3c:df:b9:52:ab:e8:83:1f:
9a:a4:d2:77:a9:77:ed:a4:ab:8f:ca:42:50:4b:f7:
91:54:66:ee:a8:73:2c:f0:48:3e:57:a4:3a:9c:84:
5e:5b:df:bc:57:e9:96:6a:ca:81:56:47:e6:5e:d7:
32:52:e1:6e:bf:f9:9d:d5:ea:72:35:32:2b:d7:98:
ed:2d:e1:53:e3:e3:dc:47:15:75:8d:c2:1d:00:32:
a5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C4:4F:EE:D8:DC:03:E7:C2:98:F0:6E:5E:24:67:BA:76:52:F3:31
X509v3 Authority Key Identifier:
keyid:6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:af:bf:46:e2:c0:12:42:3b:91:70:61:81:a7:f5:2d:79:10:
58:4f:52:05:1b:90:ad:98:36:d8:8e:de:70:45:b7:51:81:b5:
2e:2a:a6:06:7c:c3:0e:ec:a4:68:b6:52:b4:89:ce:6f:03:44:
ad:b6:a4:a4:09:13:ae:52:eb:42:e4:2e:07:84:a2:b3:56:e8:
a2:21:bd:eb:19:04:f6:04:c4:ad:b7:b9:64:fc:c3:6a:06:14:
d9:cd:08:ea:22:23:4c:04:31:c9:15:99:85:5c:76:57:51:4e:
88:fc:90:65:7b:f7:39:f2:b1:f2:9c:ee:d3:cd:21:96:61:a5:
e4:26:50:c3:e4:f1:f1:10:1a:5e:b9:49:15:90:cd:d0:73:ff:
9e:5a:e3:e4:ab:a3:02:64:10:0a:be:b0:42:f7:bd:4a:01:9e:
d8:50:c5:7e:8a:b7:b4:b3:7d:16:7a:b1:3a:45:26:82:df:6c:
b9:dc:07:48:91:5d:7a:72:01:14:d9:7b:5f:50:ee:db:ad:f3:
3d:c1:8b:87:3e:02:78:74:e7:ec:ca:c1:a2:84:c2:b7:ca:b7:
97:f1:82:1b:a6:22:45:1b:64:b8:c7:3b:37:2e:28:e6:8e:42:
be:6f:96:37:13:3a:d9:3a:98:c6:fb:79:bc:d0:e2:10:a7:21:
8e:5e:a0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:34 2025 by rpki-client